$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/996a8c3d-493a-3083-8c2a-64a52f163771.roa File: 996a8c3d-493a-3083-8c2a-64a52f163771.roa (raw, json) Hash identifier: FOxu1bHfQdz9WJ++A/41KrEog8kVXOAevOmDlYUMlbU= Subject key identifier: 02:96:4C:65:DA:3F:11:41:57:47:B2:C3:20:8D:4C:1D:36:57:76:5F Certificate issuer: /CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Certificate serial: 010D0C9F4328584F10378B328B383ABC8657D480 Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/996a8c3d-493a-3083-8c2a-64a52f163771.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 393397 IP address blocks: 64.188.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:8b:32:8b:38:3a:bc:86:57:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=a348de40-8fe7-43e7-8d7d-40c08018a983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:05:f4:ab:8c:ac:00:ba:06:d9:b7:cf:98: b1:f2:cf:df:08:54:67:40:93:01:b1:e7:4a:51:cd: 5c:aa:5c:31:00:77:2b:a2:5f:7b:a1:45:49:a6:1f: 18:ed:15:a8:d8:51:c5:90:4b:6d:4d:db:3f:1c:fc: 46:c3:89:0c:a4:c4:9e:aa:0a:ae:a5:4e:b3:1b:24: 1a:c8:ed:ba:59:16:7b:3b:5d:e1:39:d1:00:dd:48: 84:ba:70:5f:e8:85:fc:1e:ba:f7:52:ea:cd:c1:ef: a0:92:e5:22:e2:21:25:6c:9e:92:ff:75:d9:42:ef: 71:37:6d:8b:d1:21:9c:4f:16:13:9d:7f:bf:fb:76: f9:94:33:31:c0:da:bb:2c:79:83:6c:0f:19:cf:0e: 93:5c:39:20:3c:79:e9:f7:38:f2:80:c2:b8:1e:e4: c5:e8:5c:b8:b7:83:4b:39:8a:26:f7:db:7d:50:86: 2b:4e:c3:75:07:1a:97:b2:ae:39:21:2e:25:5c:f2: 4d:84:34:be:25:f7:79:2b:1d:aa:3e:31:ef:cd:27: e0:12:83:de:21:ef:ac:2d:38:db:02:0e:70:67:59: 3a:2c:8b:33:4f:68:35:e4:e4:6c:e1:2b:87:16:0f: be:3f:f4:67:28:a5:5b:b3:17:07:b3:0b:56:94:de: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:96:4C:65:DA:3F:11:41:57:47:B2:C3:20:8D:4C:1D:36:57:76:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/996a8c3d-493a-3083-8c2a-64a52f163771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl X509v3 Authority Key Identifier: keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer sbgp-ipAddrBlock: critical IPv4: 64.188.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1a:9e:e9:e9:fd:d4:7d:27:13:9b:50:0c:a1:f7:02:33:78: 39:e9:20:27:88:59:94:9d:41:a4:be:6c:59:93:0f:57:84:5f: cf:02:91:87:41:cb:09:1c:a1:98:29:0b:8d:cc:00:0a:da:f0: 86:14:5f:0d:6a:5b:e7:a5:01:48:45:5e:5a:f7:67:0b:f2:b4: ee:fd:a2:3b:1a:66:d3:44:5c:a9:41:d6:c5:01:f7:8b:df:2a: 9e:84:2b:93:29:f6:56:15:0b:60:56:ed:b6:15:e6:4f:b0:94: 0f:55:34:bb:96:23:02:d4:7b:90:35:64:27:2b:34:fb:08:72: 92:6f:9c:4d:72:96:09:29:55:d2:6e:d1:e0:40:b1:f1:90:fd: 5b:bb:2a:d8:d2:30:df:f8:93:88:50:7e:a7:23:2b:49:d1:64: af:99:96:a2:d8:8d:26:35:d6:e3:e6:13:04:1a:79:06:f7:a9: 54:1f:89:4d:d6:8f:53:55:2a:00:4a:1c:5e:34:85:3c:0f:d9: 06:3d:91:1c:90:e4:c9:ba:58:e4:12:c4:9c:1a:90:00:99:e7: 16:6b:74:20:d1:e6:aa:52:3b:64:55:18:b6:5c:06:4b:bb:ca: 91:28:74:d8:05:5f:be:fe:b3:99:72:c8:f4:f2:a9:25:6f:3d: 38:44:c0:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4syizg6vIZX1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmUxMDYwMWMtZTI4MC00NTEwLTlkODQtYjZkMmIwMmI4 NDQ2MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk YTM0OGRlNDAtOGZlNy00M2U3LThkN2QtNDBjMDgwMThhOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXQF9KuMrAC6Btm3z5ix8s/fCFRnQJMBsedK Uc1cqlwxAHcrol97oUVJph8Y7RWo2FHFkEttTds/HPxGw4kMpMSeqgqupU6zGyQa yO26WRZ7O13hOdEA3UiEunBf6IX8Hrr3UurNwe+gkuUi4iElbJ6S/3XZQu9xN22L 0SGcTxYTnX+/+3b5lDMxwNq7LHmDbA8Zzw6TXDkgPHnp9zjygMK4HuTF6Fy4t4NL OYom99t9UIYrTsN1BxqXsq45IS4lXPJNhDS+Jfd5Kx2qPjHvzSfgEoPeIe+sLTjb Ag5wZ1k6LIszT2g15ORs4SuHFg++P/RnKKVbsxcHswtWlN5LPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKWTGXaPxFBV0eywyCNTB02V3ZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZTEw NjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAyYjg0NDYvOTk2YThjM2QtNDkzYS0z MDgzLThjMmEtNjRhNTJmMTYzNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmUxMDYwMWMtZTI4MC00NTEwLTlk ODQtYjZkMmIwMmI4NDQ2LzZlMTA2MDFjLWUyODAtNDUxMC05ZDg0LWI2ZDJiMDJi ODQ0Ni5jcmwwHwYDVR0jBBgwFoAUTu1El1iaHDmaM7ilgAeW14M6ikQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQy YjAyYjg0NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQLwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIanunp/dR9JxObUAyh9wIzeDnpICeIWZSdQaS+bFmTD1eEX88CkYdB ywkcoZgpC43MAAra8IYUXw1qW+elAUhFXlr3ZwvytO79ojsaZtNEXKlB1sUB94vf Kp6EK5Mp9lYVC2BW7bYV5k+wlA9VNLuWIwLUe5A1ZCcrNPsIcpJvnE1ylgkpVdJu 0eBAsfGQ/Vu7KtjSMN/4k4hQfqcjK0nRZK+ZlqLYjSY11uPmEwQaeQb3qVQfiU3W j1NVKgBKHF40hTwP2QY9kRyQ5Mm6WOQSxJwakACZ5xZrdCDR5qpSO2RVGLZcBku7 ypEodNgFX77+s5lyyPTyqSVvPThEwPc= -----END CERTIFICATE-----Generated at Sun Sep 27 16:45:04 2026 by rpki-client